WID-SEC-2025-0691 — SugarCRM Sugar Enterprise: Mehrere Schwachstellen

Summary

Ein Angreifer kann mehrere Schwachstellen in SugarCRM Sugar Enterprise ausnutzen, um erhöhte Rechte zu erlangen, Sicherheitsmaßnahmen zu umgehen, vertrauliche Informationen preiszugeben, Cross-Site-Scripting-Angriffe durchzuführen, beliebigen Code auszuführen oder Daten zu manipulieren.

Product

SugarCRM ist ein Enterprise CRM Produkt für Vertriebs-, Marketing- und Serviceteams über den gesamten Kundenlebenszyklus.

Revision history

2025-04-02 #1
Initiale Fassung

References

SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-001/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-002/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-003/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-004/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-005/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-006/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-007/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-008/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-009/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-010/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-011/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-012/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-013/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-014/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-015/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-016/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-017/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-018/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-019/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-020/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-021/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-022/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-023/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-024/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-025/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-026/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-027/
SugarCRM Security Advisory vom 2025-04-02
https://support.sugarcrm.com/Resources/Security/sugarcrm-sa-2025-028/